Microsoft Excel 2007 SP3, Excel 2010 SP2, Excel 2013 SP1, Excel 2013 RT SP1, Excel 2016, Office Compatibility Pack SP3, and Excel Viewer allow user-assisted remote attackers to execute arbitrary commands via a crafted cell that is mishandled upon a click, aka "Microsoft Office Security Feature Bypass Vulnerability."
References
| Link | Resource |
|---|---|
| http://www.securityfocus.com/bid/94660 | Broken Link Third Party Advisory VDB Entry |
| http://www.securitytracker.com/id/1037441 | Broken Link Third Party Advisory VDB Entry |
| https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148 | Patch Vendor Advisory |
Configurations
Configuration 1 (hide)
|
History
16 Jul 2024, 17:33
| Type | Values Removed | Values Added |
|---|---|---|
| CPE | cpe:2.3:a:microsoft:office_compatibility_pack:*:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:excel:2013:sp1:*:*:*:*:*:* |
cpe:2.3:a:microsoft:office_compatibility_pack:-:sp3:*:*:*:*:*:* cpe:2.3:a:microsoft:excel_viewer:-:*:*:*:*:*:*:* cpe:2.3:a:microsoft:excel:2013:sp1:*:*:-:*:*:* |
| References | () http://www.securityfocus.com/bid/94660 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () http://www.securitytracker.com/id/1037441 - Broken Link, Third Party Advisory, VDB Entry | |
| References | () https://docs.microsoft.com/en-us/security-updates/securitybulletins/2016/ms16-148 - Patch, Vendor Advisory | |
| CWE | NVD-CWE-noinfo |
Information
Published : 2016-12-20 06:59
Updated : 2024-07-16 17:33
NVD link : CVE-2016-7262
Mitre link : CVE-2016-7262
CVE.ORG link : CVE-2016-7262
JSON object : View
Products Affected
microsoft
- excel
- office_compatibility_pack
- excel_viewer
CWE